------------[ cut here ]------------
WARNING: kernel/bpf/verifier.c:2742 at reg_bounds_sanity_check+0x3c0/0x428 kernel/bpf/verifier.c:2742, CPU#0: syz.6.691/12789
verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0)
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 0 UID: 0 PID: 12789 Comm: syz.6.691 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Call trace: 
[<80201a40>] (dump_backtrace) from [<80201b34>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:82290d80 r6:00000000 r5:822a269c r4:00000001
[<80201b1c>] (show_stack) from [<8021ed9c>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201b1c>] (show_stack) from [<8021ed9c>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120)
[<8021ed40>] (dump_stack_lvl) from [<8021edc8>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
 r7:82290d80 r6:88b55400 r5:00000000 r4:82a7cd14
[<8021edb0>] (dump_stack) from [<802025c4>] (vpanic+0xe0/0x2e4 kernel/panic.c:490)
[<802024e4>] (vpanic) from [<802027fc>] (trace_suspend_resume+0x0/0xd8 kernel/panic.c:627)
 r7:803dc5f0
[<802027c8>] (panic) from [<80251f68>] (check_panic_on_warn kernel/panic.c:377 [inline])
[<802027c8>] (panic) from [<80251f68>] (get_taint+0x0/0x1c kernel/panic.c:372)
 r3:8280c504 r2:00000001 r1:8228956c r0:82290d80
[<80251ef0>] (check_panic_on_warn) from [<802520e0>] (__warn+0x94/0x1a0 kernel/panic.c:902)
[<8025204c>] (__warn) from [<802523d4>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:937)
 r8:00000009 r7:822a8f38 r6:dfa498bc r5:88b55400 r4:00000000
[<802521f0>] (warn_slowpath_fmt) from [<803dc5f0>] (reg_bounds_sanity_check+0x3c0/0x428 kernel/bpf/verifier.c:2742)
 r10:859c8000 r9:04000000 r8:00000000 r7:04000000 r6:00000000 r5:822a969c
 r4:85f1eaa0
[<803dc230>] (reg_bounds_sanity_check) from [<803e9040>] (reg_set_min_max kernel/bpf/verifier.c:16577 [inline])
[<803dc230>] (reg_bounds_sanity_check) from [<803e9040>] (reg_set_min_max+0x230/0x288 kernel/bpf/verifier.c:16542)
 r10:00000000 r9:00000030 r8:859c8000 r7:859ce118 r6:859ce0a8 r5:858362a0
 r4:85f1eaa0
[<803e8e10>] (reg_set_min_max) from [<803f8940>] (check_cond_jmp_op+0x434/0x1968 kernel/bpf/verifier.c:17021)
 r10:85836000 r9:00000030 r8:859e7c00 r7:00000070 r6:859c8000 r5:87e733c0
 r4:ea48d088 r3:85f1eaa0
[<803f850c>] (check_cond_jmp_op) from [<803ff3f8>] (do_check_insn kernel/bpf/verifier.c:20446 [inline])
[<803f850c>] (check_cond_jmp_op) from [<803ff3f8>] (do_check kernel/bpf/verifier.c:20586 [inline])
[<803f850c>] (check_cond_jmp_op) from [<803ff3f8>] (do_check_common+0x2160/0x31c4 kernel/bpf/verifier.c:23870)
 r10:859c8000 r9:00000000 r8:859e7c00 r7:859ce000 r6:ea48d088 r5:ea48d040
 r4:ea48d000
[<803fd298>] (do_check_common) from [<80403838>] (do_check_main kernel/bpf/verifier.c:23953 [inline])
[<803fd298>] (do_check_common) from [<80403838>] (bpf_check+0x275c/0x2d2c kernel/bpf/verifier.c:25260)
 r10:859ce000 r9:00000001 r8:859c8000 r7:00000a7b r6:859c88bc r5:00000000
 r4:00000016
[<804010dc>] (bpf_check) from [<803d5980>] (bpf_prog_load+0x5b0/0xdd8 kernel/bpf/syscall.c:3088)
 r10:dfa49d58 r9:88b55400 r8:8857a730 r7:dfa49d18 r6:00000000 r5:00000000
 r4:dfa49eb0
[<803d53d0>] (bpf_prog_load) from [<803d717c>] (__sys_bpf+0x334/0x2118 kernel/bpf/syscall.c:6164)
 r10:00000005 r9:00000000 r8:dfa49e50 r7:00000048 r6:88b55400 r5:200054c0
 r4:00000000
[<803d6e48>] (__sys_bpf) from [<803d94f4>] (__do_sys_bpf kernel/bpf/syscall.c:6274 [inline])
[<803d6e48>] (__sys_bpf) from [<803d94f4>] (sys_bpf+0x2c/0x48 kernel/bpf/syscall.c:6272)
 r10:00000182 r9:88b55400 r8:8020029c r7:00000182 r6:00346450 r5:00000000
 r4:00000000
[<803d94c8>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xdfa49fa8 to 0xdfa49ff0)
9fa0:                   00000000 00000000 00000005 200054c0 00000048 00000000
9fc0: 00000000 00000000 00346450 00000182 00346418 00000000 00000001 76efb0dc
9fe0: 76efae88 76efae78 00018734 0012fc20
Rebooting in 86400 seconds..